Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/Zueg7bc3V9pCk7nbGlHxnyw_ZVc.roa
File: Zueg7bc3V9pCk7nbGlHxnyw_ZVc.roa (raw, json)
Hash identifier: S92EGUfd1A1ihZhqRMltu4SKGv/KXp/9J30XdyLSHcc=
Subject key identifier: 66:E7:A0:ED:B7:37:57:DA:42:93:B9:DB:1A:51:F1:9F:2C:3F:65:57
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 0194173C0DC0011CEA60A27172FBC1B074EA
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/Zueg7bc3V9pCk7nbGlHxnyw_ZVc.roa
Signing time: Mon 30 Dec 2024 11:03:19 +0000
ROA not before: Mon 30 Dec 2024 11:03:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 92.53.160.0/20 maxlen: 24
92.53.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:17:3c:0d:c0:01:1c:ea:60:a2:71:72:fb:c1:b0:74:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Dec 30 11:03:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66e7a0edb73757da4293b9db1a51f19f2c3f6557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:d3:c0:07:e2:24:23:47:ab:fc:59:e6:a1:
e7:3b:88:bc:f8:13:3a:c8:ef:a0:81:a3:cf:1d:e1:
26:81:41:d4:34:d4:9d:17:21:7b:65:d2:96:8c:b8:
03:5b:9b:de:07:03:8a:43:ea:25:b3:14:a6:2d:4f:
0b:78:4d:a1:82:86:40:4b:38:a6:16:87:12:e3:3b:
19:d2:d0:65:20:5e:93:32:00:d9:96:f9:1f:81:6d:
b3:3e:f3:4b:0f:05:dd:0d:15:d0:1b:d7:32:34:e6:
de:bd:e0:df:43:18:b9:47:67:ec:7e:e4:15:99:9d:
34:5d:c7:4b:82:3a:07:c5:a9:34:f4:ce:b7:77:ba:
8a:9f:56:7d:c9:32:24:28:78:5f:22:56:29:0e:b7:
73:c9:14:c4:f4:1e:e9:32:ba:2e:46:f6:01:ed:dd:
1c:40:85:51:b5:3f:42:9a:bb:d9:00:70:07:91:70:
f1:8a:dd:9d:12:38:15:80:e7:59:25:30:0a:bd:21:
2e:d3:d7:4a:e1:14:49:72:7d:55:94:46:fd:e5:b3:
f8:ff:a1:d5:b2:fd:33:90:02:a4:d1:ed:c9:92:2f:
f9:24:97:c6:73:01:af:c4:13:01:5d:93:92:3f:78:
a9:b9:a4:d7:4d:9c:26:75:71:58:c2:0d:b9:d5:9c:
49:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E7:A0:ED:B7:37:57:DA:42:93:B9:DB:1A:51:F1:9F:2C:3F:65:57
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/Zueg7bc3V9pCk7nbGlHxnyw_ZVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.160.0/20
92.53.184.0/22
Signature Algorithm: sha256WithRSAEncryption
32:d1:e6:bd:36:8e:80:10:30:93:4c:f8:ff:b3:a1:77:74:06:
af:21:71:d9:0d:ed:a7:05:73:b6:a8:65:41:06:f5:eb:df:ee:
35:cc:0b:eb:53:12:ab:d0:78:b6:e1:75:3e:e2:95:0f:c2:8c:
60:d4:a0:10:74:c7:58:05:fb:1a:d6:88:13:9e:59:a9:55:c0:
e9:2b:b2:5a:30:35:a8:aa:d4:93:26:46:7c:a5:24:3b:29:78:
70:a9:d2:9d:ae:be:03:ec:74:f7:9c:28:06:99:89:22:bc:c0:
99:8d:d0:87:c0:33:7b:ac:28:73:b9:5f:cb:41:26:1c:6a:7d:
b8:f0:72:05:15:d6:10:94:af:cc:19:01:aa:e3:14:d5:b1:9d:
eb:70:5e:03:a9:12:eb:4b:ad:9b:5e:18:e1:25:60:1f:3d:0c:
ec:88:31:30:b2:93:c1:a4:3e:a0:f7:15:ba:b5:db:b8:a8:fd:
8e:2b:0a:68:54:00:70:e0:59:77:75:26:50:fd:b4:53:76:e0:
0d:e5:82:5b:ba:84:43:f3:e4:32:b0:a8:ca:ac:00:88:59:25:
5b:c2:98:8b:b3:74:4b:42:da:ac:10:5d:c8:69:d7:cd:27:78:
d6:53:cc:0e:9b:f0:91:0e:55:b8:65:18:8c:73:75:b8:82:ba:
4f:53:56:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:23:46 2025 by rpki-client